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; • 2 , . : mob?e ;; tei^tr,al r ;«nd! ; :a : ^»eWay i (2.. ; 3) . :rfi«H^ i^iBh ^(d ^Siinfcaiiort ^ 
i : I: ^ f P ro ^ s ^ijrity: proteikiori fdr said prK/afe hetwo^ (li)/ tti'e-. " 

including a security asspciation between said; mobile te'^ 
; ; 9^^y <2. 3> for Iiifjouncl e»mnrtiinI<^tton and anpftier seburffy ^doblatioW.for 
y'.-..< putbound^comhiunlcaOon,' ' ; ■■ * ». ' i. ' . : "| '• '/' 

• : J; characterised in that, in response, to a handover btcqrinnunication:caiisihg : an ?• 
IP address (MN Co @) of said mobile terminal .(4) to change to a new IP • 
: address {MN New Co @), said mobile terminal updates its Inbound security 
association from said gateway (2. 3) so that it can receive packets sent to it 
' with'said new IP address (MN New Co @) as destination, said mobile terminal ; 
(4) sends a first signalling message with said home agent (5) as destination in 
<S*j.to said, gateway (2, 3). said first, signalling message . 
; - indicating said new IP adctess (MN jl\feW Wmr^^^oMdo'^^j 
•:: agent. (5). the inbound security association of said gateway (2, 3) from said ' 
mobile terminal (4) accepts said first signalling message without checking its 
source address, said gateway (2, 3) towards said first signalling message 
within said private, network. (1) to said home agent (5). said home agent (5) : 
.-=•., checks the validity of said first signalling message and, if it is valid, updates its ; : 
'address data and isends a second signalling message to said gateway (2. 3) 
• indicating said new address (MN ArWco @), and said gateway (2, 3) updates : - 
, .J* Abound security^ response to : 

the new address (MNA/ew Co @) indicated. : ■>. ,._ ; :'■ 

A.method as .claimed In claim .1.. wherein/communication between said mobile : 
node (4) and said gateway (2. 3) is in accordance with an IPsec protocol i 
specification. : : - : ;. . . '. •: .'; .;. y : ■ . '.• •'■ •■ ••• ■ ; : 
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;3v>:,^ tfsfcdfnti^ 

(Hi: A m^H^ ^ ^i%cf : rrv any-p^j^fng claim; ^gisrtmtiorT j repjly fbrV 

•S/- 1 y:-V-V*;f * "--•■■v :;; : /; : ■. ; - :; 

.s: .fi^obile in cqrnmijnlcafiph. by/a method as " 

^/^^fW/.^*?..'; comprising;,;. means' responsive toj/a^haria^ ! : pf.. : 
; ! ^l^ mrt ^^ W*P ^ lf3 ! ?3dresi (WN bo i@) of isfiiid moolle terminal . to V 
j' " changeito a new IP addres^XM^ /Vevv Cp @) for. updating the inboun^ security., \ 
: : association of said ;mobile^iynina) £f IMp feiigatewa^/^ so that tt cari 
: ; receive packets sent with said new IP address <MN Neto Co ®) as destination ' 
and for sending a first signalling message with said home agent (5) as . 
destination through a secure tunnel (20') to said gateway, said first signalling 
message indicating said new. IP address (MN New Co @) in secure form to 
- said home agent (5). , 

,6. .A mobile tenrfnzifor use tri i communis :: 
• : - ( prpceding": claim, ^ ; ;; bdniprising " means ' responsive l.to^ a - handover of V 
communication causing ah IP address (MN Co @) of said mobile terminal (4) ' 
.to change to a new IP address (MN New Co @) for updating the outbound 
secunty association of said mobile terminal (4) to said gateway (2, 3) so that 
. said mobile terminal (4) can send packets to said gateway (2, 3) with said new 
; IP address (MN A/eVCo^g) as source address. \ ' \ ■ 

7, A; gateway for. use in communication byi a method as claimed In any preceding: . 
. . "claim, comprising means responsive to said. first .signalling message receded 
in a secure tunnel (20') from said mobile terminal with said home agent (5) W 
• destination for causing said inbound security. association at said gateway. (2, 3)' 
\ \ f^-saW mobile terminal (4)^0 accept sard' first signalling message ytfthout 
, . :.che^ng soUr^address arid for torwarding:said firs ; t signalling: message' to • 
\V.saId ..home ^ agent, (5), -and means responsive : toSsaid second- signalling 1 ,-; 
message indicatirig said, new address JjMNl , Weiv. Co for updating said r 
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I:.' ; , i^P"PP^ ^-t^^" e "f ^cl^ss <^M^^iQ¥>'@>" rndfrati'a:- " ' ' : 7:/^ j; V- : ir- 1 "-:-; 
0^ : :: 

'■ :: • Reived frorri say gateway & 3);^ saridtog said second Wi^naliing ntessage ^ - 
.;. - t<> said gateway (2/3) ihdicallng sald n^w addre^;(^N : /y eM , ; Q6 ^) fon said ' C 
, /- gateway to update tts p^ 



